Free Google Associate Cloud Engineer Exam Dumps and Associate Cloud Engineer Exam Questions

Question No: 11

MultipleChoice

30. You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images. The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types. You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?

Options

AAssign the pods of the image rendering microservice a higher pod priority than the older microservices

BCreate a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purpose
machine type nodes for the other microservices

CUse the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices

DConfigure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default

Question No: 12

MultipleChoice

Your company's security vulnc'ability managen->enl policy wonts 3 member of the security tearr ;o have visibility into vulnerabi ities and other OS metadata for a specific Compute Engine instance This Compute Engine instance hosts a critical application in your Gongle Cloud p'oject. You need to irrplement your company's security vulnerability management policy. What should you dc?

Options

A* Ensuie that the Ops Agent Is Installed on the Compute Engine instance.
* Create a custom metric in the Ctoud Monitoring dashboard.
* Provide the security team menber with access to this dashboard.

B* Ensure :hat the Ops Agent is installed on tie Compute Engine instance.
* Provide the security team member roles/configure.inventoryViewer permission.

C* Ensure that the OS Config agent Is Installed on the Compute Engine instance.
* Provide the security team member roles/configure.vulnerabilityViewer permission.

D* Ensure that the OS Config agent is installed on the Compute Engine instance
* Create a log sink Co a BigQuery dataset.
* Provide the security team member with access to this dataset.

Question No: 13

MultipleChoice

You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

Options

ACreate a Cloud Bigtable cluster and use the HBase API

BDeploy MongoDB Alias from the Google Cloud Marketplace

CDownload a MongoDB installation package and run it on Compute Engine instances

DDownload a MongoDB installation package, and run it on a Managed Instance Group

Question No: 14

MultipleChoice

Your security team has been reluctant to move to the cloud because they don't have the level of network visibility they're used to. Which feature might help them to gain insights into your Google Cloud network?

Options

ARoutes

BSubnets

CFlow logs

DFirewall rules

Question No: 15

MultipleChoice

What's the easiest way to ensure that the nodes in your Kubernetes cluster are always up-to-date with the latest stable version of Kubernetes?

Options

AOpt into the Kubernetes Node Update program from the quotas page.

BRun the kubectl nodes update command.

CRun the kubectl nodes upgrade command.

DEnable the automatic node upgrades setting.

Question No: 16

MultipleChoice

Your developers have created an application that needs to be able to make calls to Cloud Storage and BigQuery. The code is going to run inside a container and will run on Kubernetes Engine and on-premises.

What's the best way for them to authenticate to the Google Cloud services?

Options

ACreate a service account, grant it the least viable privileges to the required services, generate and download a key. Use the key to authenticate inside the application.

BUse the default service account for App Engine which already has the required permissions.

CUse the default service account for Compute Engine which already has the required permissions.

DCreate a service account, with editor permissions, generate and download a key. Use the key to authenticate inside the application.

Question No: 17

MultipleChoice

Your developers are trying to connect to an Ubuntu server over SSH to diagnose some errors. However, the connection times out. Which command should help solve the problem?

Options

Agcloud compute firewall-rules create 'open-ssh' --network $NETWORK --allow tcp:22

Bgcloud compute firewall-rules create 'open-ssh'

Cgcloud compute firewall-rules create 'open-ssh' --network $NETWORK --deny tcp:22

Dgcloud compute firewall-rules create 'open-ssh' --network $NETWORK --allow tcp:3389

Question No: 18

MultipleChoice

Your engineers have asked you to set up a subnet with the largest IP address range possible. Which of the following ranges would work best?

Options

A0.0.0.0/0

B10.0.0.0/32

C192.168.0.0/16

D10.0.0.0/8

Question No: 19

MultipleChoice

Your developers have some application metrics that they're tracking. They'd like to be able to create alerts based on these metrics. What steps need to happen in order to alert based on these metrics?

Options

AIn the UI create a new logging metric with the required filters, edit the application code to set the metric value when needed, and create an alert in Stackdriver based on the new metric.

BCreate a custom monitoring metric in code, edit the application code to set the metric value when needed, create an alert in Stackdriver based on the new metric.

CAdd the Stackdriver monitoring and logging agent to the instances running the code.

DCreate a custom monitoring metric in code, in the UI create a matching logging metric, and create an alert in Stackdriver based on the new metric.

Question No: 20

MultipleChoice

You've been running your App Engine app for a few weeks with Autoscaling, and it's been working well. However, your marketing team is planning on a massive campaign, and they expect a lot of burst traffic. How would you go about ensuring there are always 4 idle instances?

Options

ASet the min_instances property in the app.yaml,

BSwitch to manual scaling and use the burst_traffic_protection property to True in the app.yaml.

CSet the min_idle_instances property in the app.yaml.

DSwitch to manual scaling and use the idle_instance_count property in the app.yaml.